Covers: Vulnerabilities & PatchingSupply Chain & AppSecIdentity & Access ManagementData BreachesAI SecurityEndpoint & Network SecurityCloud SecurityZero-Days & ExploitsGovernance, Risk & CompliancePrivacy
PortSwigger released Burp Suite Professional/Community 2024.1.1.5 on 7 March 2024, fixing a bug where Burp sometimes displayed an incorrect request/response pair when selecting items in Target > Site map. The release also upgrades Burp's built-in browser...
PortSwigger released Burp Suite Professional/Community 2024.2.1.1 on 7 March 2024, fixing a bug where Burp sometimes displayed an incorrect request/response pair when selecting items in Target > Site map. The release also upgrades Burp's built-in browser...
PortSwigger released Burp Suite Enterprise Edition 2024.3 on 8 March 2024, adding the ability to set any configuration file value through an environment variable so CI/CD pipelines no longer need a new configuration file. The release also improves error...
PortSwigger's BApp Store lists Co2, a Burp Suite extension by Jason Gillam at version 1.2.0, last updated 11 March 2024, containing modules that extend Burp's capabilities with their own configuration sub-tabs. The listing warns that the SQLMapper...
PortSwigger released Burp Suite Professional/Community 2024.2.1.2 on 12 March 2024, upgrading Burp's built-in browser to Chromium 122.0.6261.112 on Windows and Mac and 122.0.6261.111 on Linux. The release also fixes a bug that prevented Burp Scanner from...
PortSwigger released Burp Suite Professional and Community 2024.1.1.6 as a stable build on Tuesday, 12 March 2024 at 11:10 UTC. The release upgrades Burp's built-in browser to Chromium 122.0.6261.112 for Windows and Mac and 122.0.6261.111 for...
PortSwigger researcher @PortSwiggerRes describes a technique that combines HTTP/2 desync (request smuggling) with the TRACE method, which reflects the received request in the response body, to build a malicious JavaScript payload and place it in the body...
PortSwigger released Burp Suite Enterprise Edition 2024.3.2 on Monday, 25 March 2024, fixing a bug that stopped the "Copy to clipboard" function from working over HTTP. The release also removed support for the MySQL external database version 5.7, with...
PortSwigger's BApp Store lists a third-party extension, version 1.1, that integrates Burp Suite into the Faction assessment collaboration framework. The extension was last updated on 02 April 2024, and PortSwigger states it makes no warranty about the...
PortSwigger released Burp Suite Professional/Community 2024.2.1.3 on 2 April 2024, adding API scanning that lets users upload an OpenAPI v3.0.x definition from a local file to seed a scan, plus Bambdas support in the Logger capture filter. The release also...
PortSwigger released Burp Suite Professional/Community 2024.3.1 on 3 April 2024, adding custom Bambda columns to the HTTP history, WebSockets history, and Logger tables, global Collaborator server settings, and a Pretty tab option to hide headers such as...
PortSwigger's BApp Store lists a third-party Burp extension called Authentication Token Obtain and Replace, authored by Synopsys-Sig at version 2.3.0 and last updated 09 April 2024. The plugin is described as helping automated scanning with Burp, with...
PortSwigger released Burp Suite Professional and Community 2024.2.1.4 as a stable build on Thursday, 11 April 2024 at 13:37 UTC. The release upgrades Burp's built-in browser to Chromium 123.0.6312.105 for Linux, 123.0.6312.88 for Windows x64,...
PortSwigger released Burp Suite Professional/Community 2024.3.1.1 on 11 April 2024, a maintenance release containing one bug fix and a browser upgrade. The fix addresses a bug where selected items in some tables were deselected when a new item was added,...
PortSwigger released Burp Suite Professional and Community 2024.2.1.5 as a stable version on Monday, 15 April 2024 at 14:27 UTC. The release upgrades Burp's built-in browser to Chromium 123.0.6312.122 for Windows and Linux, and 123.0.6312.123 for...
PortSwigger released Burp Suite Professional and Community 2024.3.1.2 as an Early Adopter build on Monday, 15 April 2024. The release upgrades Burp's built-in browser to Chromium 123.0.6312.122 on Windows and Linux and 123.0.6312.123 on Mac. What's...
PortSwigger released Burp Suite Enterprise Edition 2024.4 on 16 April 2024, which improves support for cipher suites and increases HTTP header sizes for SAML. The release also fixes some bugs, and the notice states that as of 15 February 2024 Atlassian...
PortSwigger has made Burp Suite Enterprise Edition available in its own secure cloud, offering the same features as the self-hosted version without infrastructure maintenance, with scanning available within minutes. The company cites its recent survey of...
PortSwigger released Burp Suite Professional and Community 2024.3.1.3 on 26 April 2024, adding custom Bambda columns for the HTTP history, WebSockets history, and Logger tables, with the column feature limited to Burp Suite Professional. The release also...
PortSwigger released Burp Suite Professional/Community 2024.4 on 29 April 2024, adding audit item prioritization, endpoint authentication configuration for API scans, and a new web cache deception scan check. The release also drops requests to advertising...
Sheet Intruder is a Burp Suite extension, authored by Milan Bharanya of Redguard AG and listed at version 1.1.0 with a last update of 30 April 2024, that simplifies fuzzing for Excel file uploads. It represents an Excel file's content as a tag that can be...
PortSwigger released Burp Suite Enterprise Edition 2024.4.1 on Thursday, 2 May 2024, adding support for Java 21.0.3 and stating that the update improves both performance and security. The release also fixes a Burp Scanner performance issue affecting...
PortSwigger released Burp Suite Professional/Community 2024.3.1.4 on 3 May 2024, upgrading Burp's built-in browser to Chromium 124.0.6367.118 on Windows, Linux, and Mac. The release also fixes a bug where custom table columns stopped returning new values...
PortSwigger released Burp Suite Professional/Community 2024.4.1 on 3 May 2024, upgrading Burp's built-in browser to Chromium 124.0.6367.118 on Windows, Linux, and Mac. The release also fixes a bug where custom table columns stopped returning new values...
One month after PortSwigger launched a cloud-hosted version of Burp Suite Enterprise Edition, the company reports it is on average 8x quicker to reach a first scan than a self-hosted installation, and that cloud users see nearly three times fewer failed...
PortSwigger's BApp Store lists Auth Analyzer, a Burp extension by Simon Reinhart at version 1.1.14, last updated 08 May 2024, that finds authorization bugs by replaying a high-privileged user's requests as a defined non-privileged user. It can extract and...
PortSwigger released Burp Suite Professional/Community 2024.4.2 on 8 May 2024, fixing a bug where Burp did not apply its own network settings when fetching URLs in the API scan launcher. The fix means API definitions can now be uploaded from URLs that...
PortSwigger's BApp Store lists a third-party extension by Drew Green, version 1.3 and last updated 10 May 2024, that lets Burp Suite work through an upstream proxy requiring Kerberos authentication. PortSwigger states that extensions are written by...
PortSwigger released Burp Suite Professional and Community 2024.4.3 as an Early Adopter release on Monday, 13 May 2024. The release upgrades Burp to Java 21.0.2 and updates Burp's built-in browser to version 124.0.6367.155 for Windows, Linux, and...
PortSwigger released a spring 2024 update to Burp Suite Enterprise Edition that makes the product available in its secure cloud for automated, scheduled DAST scans without self-hosted infrastructure, and adds the ability to import custom scan checks...